-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Alexander Wenzel wrote:
| I use Samba 3.0.2rc2 on Suse 9.0 (heimdal 0.6-68) as a | Domainmember for File -and Printservices (about 100 Users). | The Linuxbox ist added to the ADS, the User are mapped | through winbindd. Everything works.. | | The I upgraded to Samba 3.0.2 and if I start the daemon, | after a while follow Error occured if a Domainclient | will connect to the Sambabox:
There where no kerberos changes between rc2 and the final 3.0.2 release. The changes were
~ * tweak to the passdb interface for sanitizing ~ passwords ~ * add defensive code paths for bad character ~ conversions ~ * fix a bug in pulling unicode strings from ~ buffers
I looked at the diff again and non should affect kerberos authentication adversly.
| Failed to verify incoming ticket! | | A new recompile didn't help!!? If the Client will connect | through the IpAdress then it works...What happend ???
I have looked into this alot and it has always come down do a kerberos configuration issue (although different for every case and not always abvious what changed fixed it).
When you connect via IP address, the client uses NTLMSSP, not kerberos. That is why it is succeeding.
cheers, jerry - ---------------------------------------------------------------------- Hewlett-Packard ------------------------- http://www.hp.com SAMBA Team ---------------------- http://www.samba.org GnuPG Key ---- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFALN1tIR7qMdg1EfYRApOIAKCshynjcdWFc/Oc+BhpjZuaIZitiACeJ+as ybQNmKe2ndCxosUwVFSsN5k= =WVLj -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
